How to set SAN:othername

[burnbabyburn]

I am trying to create Samba AD-DC certs with smallstep which requires:
setting SAN:OtherName

looks like this in openssl for samba AD-DC

[ new_oids ]
msADGUID=1.3.6.1.4.1.311.25.1

[dc_subjalt]
DNS=[DNS name of domain controller]
otherName=msADGUID;FORMAT:HEX,OCTETSTRING:[DC's GUID in HEX, eg, FEEDDEADBEEF...]

We can set eku with unknownkeyextension and define custom oids in template
But how to set SAN OtherName?
Can smallstep parse it?
SplitSANs(sans []string) (dnsNames []string, ips []net.IP, emails []string, uris []*url.URL)

IF #206 gets resolved in the future, one could issue certificates for Samba AD/KDC Server and client SmardCard login. (e.g. from a TPM based virtuell SC on W10)
Which would be nice

[maraino]

Currently, the only way to set the otherName SAN would be to add the raw subject alternative extension as an Extension in the template but to do that you need to manually marshal the full extension value.

[maraino]

@burnbabyburn can you create an issue to support otherName as well as the rest of SANs using templates.

[maraino]

This question is now tracked in #431